policy

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Nov 15, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Oct 17, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Oct 7, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Sep 20, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Sep 14, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Aug 24, 2022 GO-2022-0998 +3 more

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Aug 18, 2022 GO-2022-0998 +3 more

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Aug 4, 2022 GO-2022-0998 +3 more

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jul 22, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jul 22, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jun 3, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Apr 27, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Changes in this version

+ func AttestationToPayloadJSON(ctx context.Context, predicateType string, verifiedAttestation oci.Signature) ([]byte, error)

+ func EvaluatePolicyAgainstJSON(ctx context.Context, name, policyType string, policyBody string, ...) error